Mobile Hacker
@mobilehacker.bsky.social
Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
www.mobile-hacker.com/2026/09/21/t...
www.mobile-hacker.com/2026/09/21/t...
Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC - Mobile Hacker
Do you have an older rooted Android phone sitting unused in a drawer? Instead of leaving it there, you can turn it into a practical NFC reader and USB keyboard for your computer. With a custom Android...
www.mobile-hacker.com
September 22, 2026 at 11:06 AM
Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
www.mobile-hacker.com/2026/09/21/t...
www.mobile-hacker.com/2026/09/21/t...
How to Copy and Backup RFID Access Cards and NFC Key Fobs with Chameleon Ultra
www.mobile-hacker.com/2026/09/07/c...
www.mobile-hacker.com/2026/09/07/c...
Chameleon Ultra: Guide to RFID Reading, Emulation and Testing - Mobile Hacker
Contactless cards and key fobs are now part of everyday life. They unlock apartment buildings, identify employees, open hotel rooms, record attendance and interact with electronic locks. Although many...
www.mobile-hacker.com
September 8, 2026 at 4:08 PM
How to Copy and Backup RFID Access Cards and NFC Key Fobs with Chameleon Ultra
www.mobile-hacker.com/2026/09/07/c...
www.mobile-hacker.com/2026/09/07/c...
Your photos can be accessed without unlocking your Android when you receive a WhatsApp video call (with demo) (not fixed)
www.mobile-hacker.com/2026/09/02/w...
www.mobile-hacker.com/2026/09/02/w...
WhatsApp Lets You View Photos Without Unlocking Smartphone - Mobile Hacker
Most people assume that once their phone is locked, their photos are protected from anyone who picks up the device. However, a behavior discovered Jose Rodriguez shows that photos may be accessible du...
www.mobile-hacker.com
September 2, 2026 at 12:50 PM
Your photos can be accessed without unlocking your Android when you receive a WhatsApp video call (with demo) (not fixed)
www.mobile-hacker.com/2026/09/02/w...
www.mobile-hacker.com/2026/09/02/w...
Can Someone Secretly Scan, Clone or Relay Your Payment and Access Card? I Tested It
youtu.be/pwzMFQLrTHU
youtu.be/pwzMFQLrTHU
Can NFC Canary Detect Someone Scanning Your Payment Card?
YouTube video by SAPSAN Cybersecurity & Military PL
youtu.be
August 21, 2026 at 8:12 AM
Can Someone Secretly Scan, Clone or Relay Your Payment and Access Card? I Tested It
youtu.be/pwzMFQLrTHU
youtu.be/pwzMFQLrTHU
New Android interception tool for component communication (IPC) mapping called #noxen for pentesters and bug bounty hunters
It captures events like Intents — letting you inspect, modify, forward, or drop them in real time via a terminal UI - pretty cool UI 😎
It captures events like Intents — letting you inspect, modify, forward, or drop them in real time via a terminal UI - pretty cool UI 😎
May 11, 2026 at 1:58 PM
New Android interception tool for component communication (IPC) mapping called #noxen for pentesters and bug bounty hunters
It captures events like Intents — letting you inspect, modify, forward, or drop them in real time via a terminal UI - pretty cool UI 😎
It captures events like Intents — letting you inspect, modify, forward, or drop them in real time via a terminal UI - pretty cool UI 😎
uConsole Review: A Portable Linux Cyberdeck
Tested this device since December - unboxing, OS installs, expansion boards, and a reproducible use case.
Full write‑up here: www.mobile-hacker.com/2026/03/30/u...
Tested this device since December - unboxing, OS installs, expansion boards, and a reproducible use case.
Full write‑up here: www.mobile-hacker.com/2026/03/30/u...
uConsole Review: A Portable Linux Cyberdeck Mobile Hacker
Today we will look at the ClockworkPi uConsole as a pocket‑sized Linux. I will explain what the device is, what comes in the box, how to install popular OS images (Kali, Ubuntu, Arch, RetroPie), how t...
www.mobile-hacker.com
March 30, 2026 at 7:04 PM
uConsole Review: A Portable Linux Cyberdeck
Tested this device since December - unboxing, OS installs, expansion boards, and a reproducible use case.
Full write‑up here: www.mobile-hacker.com/2026/03/30/u...
Tested this device since December - unboxing, OS installs, expansion boards, and a reproducible use case.
Full write‑up here: www.mobile-hacker.com/2026/03/30/u...
First‑ever Mobile Hacking Conference, happening next week — fully online and completely free.
I’ve summarized everything you need to know in one place — speakers, talks, CTFs, giveaways, free courses, and more.
www.mobile-hacker.com/2026/02/23/t...
I’ve summarized everything you need to know in one place — speakers, talks, CTFs, giveaways, free courses, and more.
www.mobile-hacker.com/2026/02/23/t...
The First Mobile Hacking Conference Is Coming This March Mobile Hacker
The world of mobile security is getting its very first dedicated online conference - and you’re invited! Get ready for summit dedicated entirely to mobile hacking, organized by Mobile Hacking Lab - a ...
www.mobile-hacker.com
February 23, 2026 at 10:42 AM
First‑ever Mobile Hacking Conference, happening next week — fully online and completely free.
I’ve summarized everything you need to know in one place — speakers, talks, CTFs, giveaways, free courses, and more.
www.mobile-hacker.com/2026/02/23/t...
I’ve summarized everything you need to know in one place — speakers, talks, CTFs, giveaways, free courses, and more.
www.mobile-hacker.com/2026/02/23/t...
How to install OpenClaw on Android and control it via WhatsApp using automated script
Blog: www.mobile-hacker.com/2026/02/11/h...
Installer script: github.com/androidmalwa...
Blog: www.mobile-hacker.com/2026/02/11/h...
Installer script: github.com/androidmalwa...
How to Install OpenClaw on an Android Phone and Control It via WhatsApp Mobile Hacker
In this post I’ll show you the exact steps I use to run OpenClaw on Android by installing Ubuntu inside Termux (no root), then launching the OpenClaw Gateway and chatting with it from WhatsApp, Telegr...
www.mobile-hacker.com
February 11, 2026 at 9:46 AM
How to install OpenClaw on Android and control it via WhatsApp using automated script
Blog: www.mobile-hacker.com/2026/02/11/h...
Installer script: github.com/androidmalwa...
Blog: www.mobile-hacker.com/2026/02/11/h...
Installer script: github.com/androidmalwa...
FIRST Ever Online Mobile Hacking Conference.
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: www.mobilehackinglab.com/mobile-hacki...
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: www.mobilehackinglab.com/mobile-hacki...
February 4, 2026 at 10:20 AM
FIRST Ever Online Mobile Hacking Conference.
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: www.mobilehackinglab.com/mobile-hacki...
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: www.mobilehackinglab.com/mobile-hacki...
Sapsan Terminal: new AI‑powered HID scripting tool that speeds up payload creation and handles the syntax for 15 supported devices (video test)
www.mobile-hacker.com/2026/02/03/s...
www.mobile-hacker.com/2026/02/03/s...
Sapsan Terminal: AI-Powered BadUSB Script Generator - Mobile Hacker
Sapsan Terminal is an AI-driven online platform that simplifies payload generation for hardware-based attacks. Instead of manually writing scripts, you can describe your goal in plain language, and th...
www.mobile-hacker.com
February 3, 2026 at 1:03 PM
Sapsan Terminal: new AI‑powered HID scripting tool that speeds up payload creation and handles the syntax for 15 supported devices (video test)
www.mobile-hacker.com/2026/02/03/s...
www.mobile-hacker.com/2026/02/03/s...
Charging cable that hacks your device
Once plugged in, it can:
-detect OS,
-inject keystrokes,
-controlled over Wi-Fi,
-create remote shell access without network connection of target
www.mobile-hacker.com/2025/12/01/p...
Once plugged in, it can:
-detect OS,
-inject keystrokes,
-controlled over Wi-Fi,
-create remote shell access without network connection of target
www.mobile-hacker.com/2025/12/01/p...
Plug, Play, Pwn: Hacking with Evil Crow Cable Wind
It’s a tiny hacking implant hidden inside a cable. Plug it into a computer, and it pretends to be a keyboard. Then it starts typing — fast. We’re talking up to 1,000 keystrokes per minute, all automat...
www.mobile-hacker.com
December 1, 2025 at 1:30 PM
Charging cable that hacks your device
Once plugged in, it can:
-detect OS,
-inject keystrokes,
-controlled over Wi-Fi,
-create remote shell access without network connection of target
www.mobile-hacker.com/2025/12/01/p...
Once plugged in, it can:
-detect OS,
-inject keystrokes,
-controlled over Wi-Fi,
-create remote shell access without network connection of target
www.mobile-hacker.com/2025/12/01/p...
Turn Your Old Android Into a Privacy Weapon!
Forget ads, trackers, and shady link - Pi-Hole is your network - level shield. And guess what? You don’t need a Raspberry Pi. That old Android in your drawer? It’s about to become your portable Pi-Hole server
www.mobile-hacker.com/2025/11/25/p...
Forget ads, trackers, and shady link - Pi-Hole is your network - level shield. And guess what? You don’t need a Raspberry Pi. That old Android in your drawer? It’s about to become your portable Pi-Hole server
www.mobile-hacker.com/2025/11/25/p...
Pi‑hole on Android: Turn Your Spare Smartphone into a Network‑Wide Ad‑Blocker
Pi‑hole is a network‑level ad and tracker blocker. Instead of installing ad‑blockers on each device, Pi‑hole runs as your DNS server, intercepting domain lookups and returning a null/blocked response ...
www.mobile-hacker.com
November 25, 2025 at 1:29 PM
Turn Your Old Android Into a Privacy Weapon!
Forget ads, trackers, and shady link - Pi-Hole is your network - level shield. And guess what? You don’t need a Raspberry Pi. That old Android in your drawer? It’s about to become your portable Pi-Hole server
www.mobile-hacker.com/2025/11/25/p...
Forget ads, trackers, and shady link - Pi-Hole is your network - level shield. And guess what? You don’t need a Raspberry Pi. That old Android in your drawer? It’s about to become your portable Pi-Hole server
www.mobile-hacker.com/2025/11/25/p...
WhatsApp by the Numbers
I dived into anonymized metadata published after a #WhatsApp security issue that exposed 3.5B phone numbers
-Android rules (81%)
-iOS dominates in rich markets
-Monaco = multi-account heaven
-China is niche but enterprise-heavy
www.mobile-hacker.com/2025/11/20/w...
I dived into anonymized metadata published after a #WhatsApp security issue that exposed 3.5B phone numbers
-Android rules (81%)
-iOS dominates in rich markets
-Monaco = multi-account heaven
-China is niche but enterprise-heavy
www.mobile-hacker.com/2025/11/20/w...
WhatsApp by the Numbers: What Anonymized Metadata from a Security Flaw Reveals
The dataset originates from metadata published in connection with a security study titled “Trivial WhatsApp Security Issue Exposed 3.5 Billion Phone Numbers.” That research demonstrated how a simple f...
www.mobile-hacker.com
November 20, 2025 at 7:45 PM
WhatsApp by the Numbers
I dived into anonymized metadata published after a #WhatsApp security issue that exposed 3.5B phone numbers
-Android rules (81%)
-iOS dominates in rich markets
-Monaco = multi-account heaven
-China is niche but enterprise-heavy
www.mobile-hacker.com/2025/11/20/w...
I dived into anonymized metadata published after a #WhatsApp security issue that exposed 3.5B phone numbers
-Android rules (81%)
-iOS dominates in rich markets
-Monaco = multi-account heaven
-China is niche but enterprise-heavy
www.mobile-hacker.com/2025/11/20/w...
CVE-2025-10184 is permission bypass that affects multiple OnePlus devices running OxygenOS 12–15 (NOT FIXED) with PoC
This vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.
www.rapid7.com/blog/post/cv...
This vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.
www.rapid7.com/blog/post/cv...
September 25, 2025 at 12:55 PM
CVE-2025-10184 is permission bypass that affects multiple OnePlus devices running OxygenOS 12–15 (NOT FIXED) with PoC
This vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.
www.rapid7.com/blog/post/cv...
This vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.
www.rapid7.com/blog/post/cv...
Deobfuscating Android Apps with Androidmeda LLM: A Smarter Way to Read Obfuscated Code
✅As a bonus, example of deobfuscating Crocodilus Malware
www.mobile-hacker.com/2025/07/22/d...
✅As a bonus, example of deobfuscating Crocodilus Malware
www.mobile-hacker.com/2025/07/22/d...
Deobfuscating Android Apps with Androidmeda: A Smarter Way to Read Obfuscated Code
I came across a new tool—Androidmeda—that caught my attention. It attempts to deobfuscate decompiled Android code using a large language model (LLMs). I decided to give it a try, and to my surprise, t...
www.mobile-hacker.com
July 23, 2025 at 8:14 AM
Deobfuscating Android Apps with Androidmeda LLM: A Smarter Way to Read Obfuscated Code
✅As a bonus, example of deobfuscating Crocodilus Malware
www.mobile-hacker.com/2025/07/22/d...
✅As a bonus, example of deobfuscating Crocodilus Malware
www.mobile-hacker.com/2025/07/22/d...
How To Turn Old Android Smartphone into Travel Router With NAS
www.mobile-hacker.com/2025/07/21/h...
www.mobile-hacker.com/2025/07/21/h...
How To Turn Old Android Smartphone into Travel Router With NAS Mobile Hacker
It’s not perfect, but it works—a clever DIY project that blends portability, privacy, and practicality.
www.mobile-hacker.com
July 21, 2025 at 8:39 AM
How To Turn Old Android Smartphone into Travel Router With NAS
www.mobile-hacker.com/2025/07/21/h...
www.mobile-hacker.com/2025/07/21/h...
Keyboard Input Injection vulnerability in Air Keyboard iOS App Still Unpatched
www.mobile-hacker.com/2025/07/17/r...
www.mobile-hacker.com/2025/07/17/r...
Remote Input Injection vulnerability in Air Keyboard iOS App Still Unpatched
On June 13, 2025 was disclosed vulnerability in the iOS version of the Air Keyboard app that exposes users to remote input injection over Wi-Fi. The flaw, documented in CXSecurity Report, allows an at...
www.mobile-hacker.com
July 17, 2025 at 7:41 AM
Keyboard Input Injection vulnerability in Air Keyboard iOS App Still Unpatched
www.mobile-hacker.com/2025/07/17/r...
www.mobile-hacker.com/2025/07/17/r...
The first version of Bitchat Android app was published yesterday
It is open-source, private, secure messaging app without needing the internet, that relies on Bluetooth mesh network
www.mobile-hacker.com/2025/07/10/o...
It is open-source, private, secure messaging app without needing the internet, that relies on Bluetooth mesh network
www.mobile-hacker.com/2025/07/10/o...
Offline, Encrypted, and Private Messaging using new Bitchat Bluetooth App
Bitchat app is designed for private, secure communication without needing the internet. Instead, it uses a Bluetooth mesh network, meaning your messages travel directly between nearby phones — no serv...
www.mobile-hacker.com
July 10, 2025 at 9:56 AM
The first version of Bitchat Android app was published yesterday
It is open-source, private, secure messaging app without needing the internet, that relies on Bluetooth mesh network
www.mobile-hacker.com/2025/07/10/o...
It is open-source, private, secure messaging app without needing the internet, that relies on Bluetooth mesh network
www.mobile-hacker.com/2025/07/10/o...
How to Install Gemini CLI on Android using Termux
www.mobile-hacker.com/2025/07/09/h...
www.mobile-hacker.com/2025/07/09/h...
July 9, 2025 at 7:31 AM
How to Install Gemini CLI on Android using Termux
www.mobile-hacker.com/2025/07/09/h...
www.mobile-hacker.com/2025/07/09/h...
Vibe Hacking with Nmap using Android
www.mobile-hacker.com/2025/07/07/v...
www.mobile-hacker.com/2025/07/07/v...
July 7, 2025 at 8:57 AM
Vibe Hacking with Nmap using Android
www.mobile-hacker.com/2025/07/07/v...
www.mobile-hacker.com/2025/07/07/v...
FileFix – New Alternative to ClickFix Attack
www.mobile-hacker.com/2025/06/24/i...
www.mobile-hacker.com/2025/06/24/i...
Introducing FileFix – A New Alternative to ClickFix Attacks
A new browser attack vectors just dropped, and it’s called FileFix — an alternative to the well-known ClickFix attack. This method, discovered and shared by mrd0x, shows how attackers can to execute c...
www.mobile-hacker.com
June 24, 2025 at 2:53 PM
FileFix – New Alternative to ClickFix Attack
www.mobile-hacker.com/2025/06/24/i...
www.mobile-hacker.com/2025/06/24/i...
How to use ADB & fastboot in Termux without root
You can use non-rooted Android to unlock bootloader, run ADB commands, remove bloatware, flash ROM, or even root another Android
www.mobile-hacker.com/2025/06/16/h...
You can use non-rooted Android to unlock bootloader, run ADB commands, remove bloatware, flash ROM, or even root another Android
www.mobile-hacker.com/2025/06/16/h...
How to Run ADB and Fastboot on a Non-Rooted Android Smartphone Using Termux
Thanks to Termux and the clever termux-adb project, you can run ADB and Fastboot directly from your phone — no computer needed. This guide breaks down how to install it, how it works, and practical us...
www.mobile-hacker.com
June 16, 2025 at 7:33 AM
How to use ADB & fastboot in Termux without root
You can use non-rooted Android to unlock bootloader, run ADB commands, remove bloatware, flash ROM, or even root another Android
www.mobile-hacker.com/2025/06/16/h...
You can use non-rooted Android to unlock bootloader, run ADB commands, remove bloatware, flash ROM, or even root another Android
www.mobile-hacker.com/2025/06/16/h...
Stryker - Android pentesting app with premium access now free until 2050!
Scan networks, launch exploits, and test web apps—all from your phone
Bonus: includes a list of suggested WiFi adapters and SimpleUSB tool for identifying USB devices on the go
www.mobile-hacker.com/2025/06/12/s...
Scan networks, launch exploits, and test web apps—all from your phone
Bonus: includes a list of suggested WiFi adapters and SimpleUSB tool for identifying USB devices on the go
www.mobile-hacker.com/2025/06/12/s...
Stryker App Goes Free: The Ultimate Mobile Pentesting Toolkit
Stryker is a powerful mobile app that transforms your Android device into a pentesting workspace. Designed to help you test networks and devices for common vulnerabilities without requiring specialize...
www.mobile-hacker.com
June 12, 2025 at 9:45 AM
Stryker - Android pentesting app with premium access now free until 2050!
Scan networks, launch exploits, and test web apps—all from your phone
Bonus: includes a list of suggested WiFi adapters and SimpleUSB tool for identifying USB devices on the go
www.mobile-hacker.com/2025/06/12/s...
Scan networks, launch exploits, and test web apps—all from your phone
Bonus: includes a list of suggested WiFi adapters and SimpleUSB tool for identifying USB devices on the go
www.mobile-hacker.com/2025/06/12/s...
Locating Smartphones Using Seeker: How a Simple Link Can Reveal Your Smartphone’s Location
www.mobile-hacker.com/2025/06/10/s...
www.mobile-hacker.com/2025/06/10/s...
Seeker: How a Simple Link Can Reveal Your Smartphone’s Location
What if someone could pinpoint your smartphone's location and gather detailed device information without you ever installing a malicious app? This is precisely what the Seeker tool is designed to demo...
www.mobile-hacker.com
June 10, 2025 at 11:28 PM
Locating Smartphones Using Seeker: How a Simple Link Can Reveal Your Smartphone’s Location
www.mobile-hacker.com/2025/06/10/s...
www.mobile-hacker.com/2025/06/10/s...